Re: GR: Ban LLM contributions from Debian

Pierre-Elliott Bécue <[email protected]> Thu, 06 Aug 2026 21:26:12 +0200
Newsgroups	gmane.linux.debian.devel.vote
Message-ID	<875x1naw4r.fsf@aic>
Pierre-Elliott Bécue <[email protected]> wrote on 24/07/2026 at 00:40:59+0200:

> Based on the feedback I got:
>
> BEGIN BALLOT OPTION
>
> Accept AI contributions for Debian specific work
> ================================================
>
> Debian as a project does not endorse or recommend the use of generative
> AI assistants for software development, as it raises multiple concerns
> about ethics, legality, copyright, etc.
>
> Nevertheless, Debian acknowledges that these practices are already in
> use and here to stay. Rather than banning their use, which seems
> counter-productive and unenforceable, the project chooses to place
> responsibility on contributors and therefore defines the following
> guidelines.
>
> *These apply exclusively to code and work done specifically for the
> Debian project (Debian websites, applications, resources, packages,
> etc.)*. They do not apply to any upstream work. In what follows, "work"
> refers to the contributions done specifically for the Debian project.
>
>  - All code and work assisted by a generative AI agent or tool must
>    comply with the DFSG.
>  - The submitter is solely responsible for the submitted work and:
>    + they sufficiently evaluated and properly understand the work they
>      intend to submit, and are able to explain and defend it;
>    + they put any potential Signed-off-by tag and GPG signatures on the
>      contributions they send to the Debian infrastructure (package,
>      commit, mail, …) themselves;
>    + any content uploaded that would end up in production on Debian
>      infrastructure (main git branch, package upload) has been submitted
>      by them explicitely.
>  - Work assisted by a generative AI agent or tool should be marked as
>    such in the adapted place (commit message, changelog, …). Some
>    lightweight generative tools, such as tab-completion in Copilot, may
>    be used without the contributor realising they rely on generative AI
>    models; we therefore trust submitters to assess when this rule
>    applies. When in doubt, add such marking;
>  - No cloud-based AI shall be used when the data transmitted could
>    either be sensitive to the project (personal data, information under
>    embargo, …) or not public (debian-private discussions, …).
>
> END BALLOT OPTION

Dear Kurt,

Please replace GPG signatures by "OpenPGP signatures" in the above
ballot option.

Cheers,

-- 
PEB
signature.asc (application/pgp-signature, 853 B)